Summary
Jeremy Harris discovered that Exim incorrectly handled sort expansions. In
environments where sort expansions are used, a remote attacker could
possibly use this issue to execute arbitrary code as root.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | exim4 | 4.86.2-2ubuntu2.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | exim4 | 4.90.1-1ubuntu1.3 |
Vulnerabilities 1
-
Unscored —
Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use t…
References
-
report
https://ubuntu.com/security/CVE-2019-13917